CAS validation error

[Cantor, Scott]

On 4/11/17, 2:41 PM, "users on behalf of IAM David Bantz" <users-bounces at shibboleth.net on behalf of dabantz at alaska.edu> wrote:

> A CAS service is triggering an error on initial login (oddly, a second attempted login usually works). First serious attempt to
> include a CAS service, so struggling to comprehend this sequence. Pointers appreciated.

Well, your initial access is including all sorts of silliness on the URL so the result is that the URLs don't match, that's clear from the log showing the two URLs. I don't know how that's normally handled, but in Java when this matters I do things like tell the container to never put JSESSIONID on the URL, that kind of thing.

-- Scott